1

ISO 9001:2000• ISO 9001 is the creation of the International

Organisation for Standardisation (ISO), a Swiss-based federation of national standards bodies.

• ISO 9001 is part of the ISO 9000 family of standards. The new ISO 9001:2000 designation comprises the ISO 9001, ISO 9002, and ISO 9003 standards.

• ISO 9001 targets the manufacturing process, although it also includes manufacturing services and software development.

• Contains 20 requirements that must be present for an effective QA system

• ISO 9001:2000 standard is applicable to all engineering disciplines, including SE

• ISO guidelines 9000-3 have been developed to interpret the standard for the use in the software processes

• ISO started out as a European standard.

2

CMM

• Capability Maturity Model: A reference model of mature practices in a specified discipline, used to assess a group’s capability to perform that discipline

• “Capability Maturity Model®” and CMM® are used by the Software Engineering Institute (SEI) to denote a particular class of maturity models

• CMMs differ by– Discipline (software, systems, acquisition, etc.)– Structure (staged versus continuous)– How Maturity is Defined (process improvement

path)– How Capability is Defined (institutionalization)

3

CMMI Representations

•There are two types of representations in the CMMI models:–staged–continuous

4

CMMI Representations

A representation allows an organization to pursue different improvement objectives

•The organization and presentation of the data are different in each representation. However, the content is the same.

5

Staged Representation•Provides a proven sequence of improvements, each serving as a foundation for the next

•Permits comparisons across and among organizations by the use of maturity levels

•Provides an easy migration from the SW-CMM to CMMI•Provides a single rating that summarizes appraisal results and allows comparisons among organizations

Indicates maturity of an organization’s standard process -- to answer, “What is a good order for approaching improvement across the organization?”

6

Maturity Levels

•A maturity level is a well-defined evolutionary plateau of process improvement.

•There are five maturity levels.

•Each level is a layer in the foundation for continuous process improvement using a proven sequence of improvements, beginning with basic management practices and progressing through a predefined and proven path of successive levels.

7

The Maturity Levels

1

2

3

4

5

Process unpredictable, poorly controlled, and reactive

Process characterized for projects and is often reactive

Process characterized for the organization and is proactive

Process measuredand controlled

Focus on continuous process improvement

Optimizing

QuantitativelyManaged

Defined

Initial

Managed

Optimizing

Defined

8

Software Engineering II

Lecture 44

Fakhar Lodhi

9

Recap

10

Continuous Representation

•Allows you to select the order of improvement that best meets your organization’s business objectives and mitigates your organization’s areas of risk

•Enables comparisons across and among organizations on a process-area-by-process-area basisIndicates improvement within a single process area -- to answer, “What is a good order for approaching improvement of this process area?”

11

Capability Levels

•There are six capability levels.•For capability levels 1-5, there is an associated generic goal.

•Each level is a layer in the foundation for continuous process improvement.

•Thus, capability levels are cumulative, i.e., a higher capability level includes the attributes of the lower levels.

12

The Capability Levels

5 Optimizing

4 Quantitatively Managed

3 Defined

2 Managed

1 Performed

0 Incomplete

13

Representing Capability Levels for a Single Process Area

•The process area capability of an implemented process can be represented by a bar.

Process

Ca

pab

ility

Lev

el This point

represents a higher level of “maturity”than this pointin a specificprocess area

3

2

1

0Process Area n

14

Comparison of Representations

Staged Continuous•Process improvement is

measured using maturity levels.

•Maturity level is the degree of process improvement across a predefined set of process areas.

•Organizational maturity pertains to the “maturity” of a set of processes across an organization

Process improvement is measured using capability levels.

Capability level is the achievement of process improvement within an individual process area.

Process area capability pertains to the “maturity” of a particular process across an organization.

15

CMMI Model Representations

16

Organizational Innovation and DeploymentCausal Analysis and Resolution5 Optimizing

4 Quantitatively Managed

3 Defined

2 Managed

Continuous process improvement

Quantitativemanagement

Processstandardization

Basicprojectmanagement

Organizational Process PerformanceQuantitative Project Management

Requirements DevelopmentTechnical SolutionProduct IntegrationVerificationValidationOrganizational Process FocusOrganizational Process DefinitionOrganizational Training Integrated Project ManagementIntegrated Supplier ManagementRisk ManagementDecision Analysis and ResolutionOrganizational Environment for IntegrationIntegrated Teaming

Requirements Management Project PlanningProject Monitoring and ControlSupplier Agreement ManagementMeasurement and AnalysisProcess and Product Quality AssuranceConfiguration Management

1 Initial

Process AreasLevel Focus

(IPPD)(IPPD)

(SS)

17

Staged Representation:Process Areas by Maturity Level

18

Requirements ManagementRequirements DevelopmentTechnical SolutionProduct IntegrationVerificationValidation

Engineering

ProjectManagement

Project PlanningProject Monitoring and ControlSupplier Agreement ManagementIntegrated Project Management(IPPD)Integrated Supplier Management (SS)Integrated Teaming (IPPD)Risk ManagementQuantitative Project Management

Organizational Process FocusOrganizational Process DefinitionOrganizational TrainingOrganizational Process PerformanceOrganizational Innovation and Deployment

ProcessManagement

Configuration ManagementProcess and Product Quality AssuranceMeasurement and AnalysisCausal Analysis and ResolutionDecision Analysis and ResolutionOrganizational Environment for Integration (IPPD)

Support

Category Process Area

19

Continuous Representation: Organization of Process

Areas

20

CMM vs ISO

• The key difference between ISO 9001 and CMM is understanding that the software process is both a software process and a manufacturing process, ISO 9001 and the whole ISO process approaches software from a manufacturing standpoint. CMM approaches it from a development standpoint.”

• The CMM model was designed with five levels of maturity, ISO does not have them.

• CMM standards are more stringent that ISO standards. ISO standards are very loose.

• ISO does not say you have to have certain standards, but CMM says you must meet these standards

• CMM was designed to ensure bug-free development. And ISO is designed to put quality into the manufacturing process. Their processes are different. Some versions of CMM and ISO have been merged together.